Cross site scripting

2009-06-2523:14:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag.

CPENameOperatorVersion
nbbceq1.4.0
nbbceq1.2
nbbceq1.0 rc5
nbbceq1.3.4
nbbceq1.0 rc2
nbbceq1.0 rc
nbbceq1.0
nbbceq1.0 rc3
nbbceq1.3.2
nbbceq1.3.1

Name	Operator	Version
nbbc	eq	1.4.0
nbbc	eq	1.2
nbbc	eq	1.0 rc5
nbbc	eq	1.3.4
nbbc	eq	1.0 rc2
nbbc	eq	1.0 rc
nbbc	eq	1.0
nbbc	eq	1.0 rc3
nbbc	eq	1.3.2
nbbc	eq	1.3.1

Rows per page:

1-10 of 151

References

osvdb.org/55266

secunia.com/advisories/35520

sourceforge.net/forum/message.php?msg_id=7455625

sourceforge.net/forum/message.php?msg_id=7456208

sourceforge.net/tracker/?func=detail&aid=2809888&group_id=235382&atid=1096820

exchange.xforce.ibmcloud.com/vulnerabilities/51288